This repository has been archived on 2026-03-10. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Torjus Håkestad 149832e4e5 security: add request body size limit to prevent DoS ...

Add MaxRequestSize configuration to HTTPConfig with a default of 1MB.
Use http.MaxBytesReader to enforce the limit, returning 413 Request
Entity Too Large when exceeded.

This prevents memory exhaustion attacks where an attacker sends
arbitrarily large request bodies.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-03 22:04:11 +01:00

..

handlers.go

security: improve path validation in get_file handler

2026-02-03 19:12:25 +01:00

server_test.go

security: improve path validation in get_file handler

2026-02-03 19:12:25 +01:00

server.go

feat: add Streamable HTTP transport support

2026-02-03 22:02:40 +01:00

session_test.go

feat: add Streamable HTTP transport support

2026-02-03 22:02:40 +01:00

session.go

feat: add Streamable HTTP transport support

2026-02-03 22:02:40 +01:00

transport_http_test.go

security: add request body size limit to prevent DoS

2026-02-03 22:04:11 +01:00

transport_http.go

security: add request body size limit to prevent DoS

2026-02-03 22:04:11 +01:00

transport_stdio.go

feat: add Streamable HTTP transport support

2026-02-03 22:02:40 +01:00

transport.go

feat: add Streamable HTTP transport support

2026-02-03 22:02:40 +01:00

types.go

feat: add MCP server instructions for flake.lock indexing

2026-02-03 18:50:51 +01:00